From 0cc5ba8d72c742b11b40a018d8d4d61e6ddbd7d2 Mon Sep 17 00:00:00 2001
From: Jay Faulkner <jay.faulkner@verizonmedia.com>
Date: Fri, 18 Sep 2020 09:36:56 -0700
Subject: [PATCH] Advertise HTTPS in IPA ramdisk without Ironic assist

Before this change, Ironic was required to send
`ipa-advertise-protocol=https` with pxe parameters to make this
code work.

Instead, ensure we *always* advertise https, via static ramdisk
configuration, when TLS is enabled.

Change-Id: I1c0bc85aefe592a2a614f60112a8982e0f03fcf7
---
 dib/ironic-python-agent-tls/pre-finalise.d/10-configure-ipa-tls | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dib/ironic-python-agent-tls/pre-finalise.d/10-configure-ipa-tls b/dib/ironic-python-agent-tls/pre-finalise.d/10-configure-ipa-tls
index aef36d5..840f939 100755
--- a/dib/ironic-python-agent-tls/pre-finalise.d/10-configure-ipa-tls
+++ b/dib/ironic-python-agent-tls/pre-finalise.d/10-configure-ipa-tls
@@ -21,6 +21,7 @@ fi
 cat <<EOF | sudo tee $CONFFILE
 [DEFAULT]
 listen_tls = True
+advertise_protocol = https
 
 [ssl]
 cert_file = $INSIDEDIR/agent.crt